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Please cancel claims 1-28 and add claims 29- 50. 
Claims 1-28 (Cancelled) 

29. (New) A cryptographic feature enablement system comprising: 
a processing unit; 

a cryptographic chip including circuitry configured to perform encryption 
and decryption for a plurality of cryptographic systems; 

a non- volatile read/write memory storing an encrypted token including 
encrypted initialization data for enabling circuitry configured to perform one of said 
cryptographic systems in said cryptographic chip; 

a bus connecting said processing unit to said non- volatile memory and said 
cryptographic chip to transmit data between said processing unit, said non-volatile 
memory, and said cryptographic chip; and 

token decryption circuitry in said non-volatile memory to decrypt said 
encrypted initialization data in said encrypted token wherein said initialization data 
enables said circuitry in said cryptographic chip to perform encryption and decryption 
of data for one of said plurality of cryptographic systems. 

30. (New) The cryptographic feature enablement system of claim 29 wherein 
said at least one non-volatile read/write memory comprises FLASH memory. 
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31. (New) The cryptographic feature enablement system of claim 29 wherein 
said non- volatile memory stores system specific information including a MAC address 
for said system. 

32. (New) The cryptographic feature enablement system of claim 31 wherein 
said MAC address is used to generate a private key. 

33. (New) A method for initializing cryptographic functionality in a system, the 
method comprising: 

starting the boot process in a system; 

using system's system-specific information to generate a key; 

decrypting an encrypted token stored in a non- volatile memory using said 
key wherein said encrypted token includes encrypted encryption initialization data; 

determining whether said decrypted encryption initialization data from 
said encrypted token is useable for a cryptographic chip in said system; and 

initializing said cryptographic chip to perform encryption and decryption 
in one of a plurality of cryptographic systems using said decrypted encryption 
initialization data responsive to a determination that said encryption initialization data is 
usable for said cryptographic chip. 

34. (New) The method of claim 33 where said system-specific information is 
said system's MAC address. 
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35. (New) A program storage device readable by a machine, tangibly 
embodying a program of instructions executable by a machine for initializing 
cryptographic functionality in a system, the method comprising: 

starting the boot process in a system; 

using system's system-specific information to generate a key; 

decrypting an encrypted token stored in a non- volatile memory using said 
key wherein said encrypted token includes encrypted encryption initialization data; 

determining whether said decrypted encryption initialization data from 
said encrypted token is useable for a cryptographic chip in said system; and 

initializing said cryptographic chip to perform encryption and decryption 
in one of a plurality of cryptographic systems using said decrypted encryption 
initialization data responsive to a determination that said encryption initialization data is 
usable for said cryptographic chip. 

36. (New) The method of claim 35 where said system-specific information is 
said system's MAC address. 

37. (New) A system for initializing cryptographic functionality in a system, the 
system comprising: 

means for starting the boot process in a system; 

means for using system's system-specific information to generate a key; 

means for decrypting an encrypted token stored in a non- volatile memory 
using said key wherein said encrypted token includes encrypted encryption 
initialization data; 
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means for determining whether said decrypted encryption initialization 

data from said encrypted token is useable for a cryptographic chip in said system; and 

means for initializing said cryptographic chip to perform encryption and 

decryption in one of a plurality of cryptographic systems using said decrypted 

encryption initialization data responsive to a determination that said encryption 

initialization data is usable for said cryptographic chip. 

38. (New) The system of claim 37 where said system-specific information is 
said system's MAC address. 

39. (New) A method for installing cryptographic initialization data in a system 
for use during system booting, the method comprising: 

identifying the system-specific information of said system; 

generating a cryptographic key using said system-specific information; 

using said cryptographic key to encrypt a token, wherein said token 
includes cryptographic initialization data applicable to a cryptographic chip in said 
system; and, 

writing said encrypted token in non-volatile memory of said system. 

40. (New) The method of claim 39 where said non-volatile memory is FLASH 
memory. 

41. (New) The method of claim 39 where said generation of at least one key 
further comprises generating a public key and a private key, and choosing said public 
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key to encrypt said token and choosing said private key to use for decrypting said 
token. 

42. (New) The method of claim 39 where said system-specific information is 
said system's MAC address. 

43. (New) A program storage device readable by a machine, tangibly 
embodying a program of instructions executable by a machine for installing 
cryptographic initialization data in a system for use during system booting, the method 
comprising: 

identifying the system-specific information of said system; 

generating a cryptographic key using said system- specific information; 

using said cryptographic key to encrypt a token, where said token 
comprises cryptographic initialization data applicable to said system; and 

writing said encrypted token in non- volatile memory in said system, where 
said non-volatile memory is configured to be accessible by a CPU in said system during 
system initialization. 

44. (New) The method of claim 43 where said non- volatile memory is FLASH 
memory. 

45. (New) The method of claim 43 where said generation of at least one key 
further comprises generating a public key and a private key, and choosing said public 
key to encrypt said token and choosing said private key to use for decrypting said 
token. 
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46. (New) The method of claim 43 where said system- specific information is 
said system's MAC address. 

47. (New) A system for installing cryptographic initialization data in a system 
for use during system booting comprising: 

means for identifying the system-specific information of said system; 
means for generating a cryptographic key using said system-specific 

information; 

means for using said cryptographic key of said at least one keys to 
encrypt a token, where said token comprises cryptographic initialization data applicable 
to said system; and, 

means for writing said encrypted token in non-volatile memory in said 
system, where said non-volatile memory is configured to be accessible by a CPU in said 
system during system initialization. 

48. (New) The system of claim 47 where said non-volatile memory is FLASH 
memory. 

49. (New) The system of claim 47 where said means for generation of at least 
one key further comprises generating a public key and a private key, and choosing said 
public key to encrypt said token and choosing said private key to use for decrypting 
said token. 

50. (New) The system of claim 47 where said system-specific information is 
said system's MAC address 
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